Exam MD-100 topic 5 question 84 discussion

HOTSPOT -
Your network contains an Active Directory domain. The domain contains 100 computers that run Windows 10.
You need to configure the computers to send the error events in the System log to a computer named Computer1 that runs Windows 10.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Suggested Answer:
Box 1: Create a source-initiated subscription
Use the Source computer initiated subscription.
Source-initiated subscriptions allow you to define a subscription on an event collector computer without defining the event source computers, and then multiple remote event source computers can be set up (using a group policy setting) to forward events to the event collector computer.
Box 2: Configure Event Forwarding by using a Group Policy Object (GPO)ֳ¶.
Windows Event Log Forwarding is a service that allows you to forward events from multiple Windows servers and collect them in one spot. The service has two main components; a forwarder and a collector. A collector is a service running on Windows server that collects all events sent to it from an event log forwarder.
Reference:
https://docs.microsoft.com/en-us/windows/win32/wec/setting-up-a-source-initiated-subscription https://adamtheautomator.com/windows-event-collector/